This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/3f5154-63d8-4a4b-9a48-1c9c4a1bbd43/1/KBoLv1LY0tSFlDQ6VUCfwQu3txo.mft File: KBoLv1LY0tSFlDQ6VUCfwQu3txo.mft (raw, json) Hash identifier: SsXcKtt57vRZHnhz1l6HEOcunWu7Hy7eB3GBcjOFKvg= Subject key identifier: A7:7C:5D:74:81:7D:3C:20:2D:4C:DF:3D:C0:36:56:E0:5D:BC:F4:DF Authority key identifier: 28:1A:0B:BF:52:D8:D2:D4:85:94:34:3A:55:40:9F:C1:0B:B7:B7:1A Certificate issuer: /CN=281a0bbf52d8d2d48594343a55409fc10bb7b71a Certificate serial: 019C4246C90894B5B8DD0F8F1E1F083A42BF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KBoLv1LY0tSFlDQ6VUCfwQu3txo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/3f5154-63d8-4a4b-9a48-1c9c4a1bbd43/1/KBoLv1LY0tSFlDQ6VUCfwQu3txo.mft Manifest number: 1812 Signing time: Mon 09 Feb 2026 12:01:01 +0000 Manifest this update: Mon 09 Feb 2026 12:01:01 +0000 Manifest next update: Tue 10 Feb 2026 12:01:01 +0000 Files and hashes: 1: 9rvSIJG4GAUEEFzw4LIIEomRjLs.roa (hash: vIaPvb+ycmPmGlSHBmqVI505OuvAOEDswUw9t3/PGlc=) 2: KBoLv1LY0tSFlDQ6VUCfwQu3txo.crl (hash: GbBsvqYQYTqK2gcRwHqXQFiSyDTmz3c1gXEnR0Qwz54=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/3f5154-63d8-4a4b-9a48-1c9c4a1bbd43/1/KBoLv1LY0tSFlDQ6VUCfwQu3txo.crl rsync://rpki.ripe.net/repository/DEFAULT/09/3f5154-63d8-4a4b-9a48-1c9c4a1bbd43/1/KBoLv1LY0tSFlDQ6VUCfwQu3txo.mft rsync://rpki.ripe.net/repository/DEFAULT/KBoLv1LY0tSFlDQ6VUCfwQu3txo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 12:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:46:c9:08:94:b5:b8:dd:0f:8f:1e:1f:08:3a:42:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=281a0bbf52d8d2d48594343a55409fc10bb7b71a Validity Not Before: Feb 9 12:01:01 2026 GMT Not After : Feb 10 12:01:01 2026 GMT Subject: CN=a77c5d74817d3c202d4cdf3dc03656e05dbcf4df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:23:27:39:6f:4d:af:19:31:8d:b6:f8:1a:74: e9:32:a3:ba:68:27:5f:be:d3:77:3c:05:4f:c8:51: a4:47:9d:3d:89:d3:5d:41:31:aa:96:ab:8a:a5:bd: 79:31:7d:be:bc:e0:38:7e:af:b2:01:ad:24:74:4c: a1:f0:3c:72:75:c0:1c:72:51:19:0e:20:ae:cd:d8: 4d:3a:21:f0:40:39:5b:ba:43:bb:5f:43:6a:8b:db: 35:94:31:9d:fd:79:c5:3a:7f:37:14:08:69:85:d6: 7e:66:c9:05:90:97:f7:d4:0a:7b:0c:40:0d:fc:dc: 36:a5:60:71:2c:0b:68:f0:01:d1:d0:e6:3f:c3:20: 98:63:b3:94:ee:39:27:71:23:da:03:60:5c:47:c4: 74:44:24:38:dc:54:8c:98:33:a2:bc:b4:ae:d9:d0: e8:56:6c:be:d3:ae:28:28:96:1c:2b:00:93:cd:cf: 0d:70:66:ae:c3:dc:34:d8:4d:c3:ea:d6:b5:fc:89: a6:36:67:0e:05:d0:4f:80:15:a5:df:3b:67:04:5e: b2:9d:de:da:73:37:74:3f:3b:96:a8:6c:a4:e9:ec: e2:15:96:30:dc:dd:2c:e5:15:81:5c:1a:1d:58:07: 11:74:5a:1b:4e:f7:f9:a3:d7:c1:67:6a:52:74:de: 37:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:7C:5D:74:81:7D:3C:20:2D:4C:DF:3D:C0:36:56:E0:5D:BC:F4:DF X509v3 Authority Key Identifier: keyid:28:1A:0B:BF:52:D8:D2:D4:85:94:34:3A:55:40:9F:C1:0B:B7:B7:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KBoLv1LY0tSFlDQ6VUCfwQu3txo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/3f5154-63d8-4a4b-9a48-1c9c4a1bbd43/1/KBoLv1LY0tSFlDQ6VUCfwQu3txo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/09/3f5154-63d8-4a4b-9a48-1c9c4a1bbd43/1/KBoLv1LY0tSFlDQ6VUCfwQu3txo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:9e:51:48:e8:91:f0:02:3d:8c:cf:13:dd:1e:32:91:2b:b4: c7:16:54:10:4a:64:41:75:cf:f6:fa:12:3a:38:9e:07:c1:6d: d4:d4:a3:0f:45:a1:10:8b:fa:3a:bd:09:c7:aa:76:31:42:08: 3e:85:39:9a:6a:f2:e1:e8:46:df:7b:4f:11:db:c1:0c:a5:ec: 95:f9:45:19:a6:e5:e8:f7:f2:46:a9:10:ab:72:18:8a:06:c9: 8d:9f:3e:8e:8a:55:d2:69:4f:c0:df:41:05:65:16:fc:c2:3a: f4:3c:c6:36:1a:4c:d1:03:77:2c:1a:c4:0b:dc:63:34:39:29: d2:5c:09:06:a5:6f:d0:71:0f:b6:78:9c:b6:01:a1:b2:1f:86: 73:f4:32:d2:4b:cf:e4:ff:fe:a8:2a:6a:0b:df:ba:4a:92:e9: 56:4b:91:46:40:b7:df:61:8b:e2:b2:5e:69:7e:c7:2f:a2:e1: 51:21:ec:25:27:da:ca:4d:4f:c9:f6:b8:c1:b1:cd:8c:63:6e: 27:bf:44:b1:db:02:76:56:3a:14:ba:2f:fa:10:3a:c1:2e:f5: 40:33:10:5d:a7:81:92:ad:95:d9:a1:9b:a7:6d:09:74:31:69: 43:d1:b6:6a:b8:6d:5b:b9:02:02:11:8a:1d:09:df:b5:9d:2f: da:8c:cc:0c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCRskIlLW43Q+PHh8IOkK/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI4MWEwYmJmNTJkOGQyZDQ4NTk0MzQzYTU1NDA5ZmMxMGJi N2I3MWEwHhcNMjYwMjA5MTIwMTAxWhcNMjYwMjEwMTIwMTAxWjAzMTEwLwYDVQQD EyhhNzdjNWQ3NDgxN2QzYzIwMmQ0Y2RmM2RjMDM2NTZlMDVkYmNmNGRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAliMnOW9Nrxkxjbb4GnTpMqO6aCdf vtN3PAVPyFGkR509idNdQTGqlquKpb15MX2+vOA4fq+yAa0kdEyh8DxydcAcclEZ DiCuzdhNOiHwQDlbukO7X0Nqi9s1lDGd/XnFOn83FAhphdZ+ZskFkJf31Ap7DEAN /Nw2pWBxLAto8AHR0OY/wyCYY7OU7jkncSPaA2BcR8R0RCQ43FSMmDOivLSu2dDo Vmy+064oKJYcKwCTzc8NcGauw9w02E3D6ta1/ImmNmcOBdBPgBWl3ztnBF6ynd7a czd0PzuWqGyk6eziFZYw3N0s5RWBXBodWAcRdFobTvf5o9fBZ2pSdN43mwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKd8XXSBfTwgLUzfPcA2VuBdvPTfMB8GA1UdIwQY MBaAFCgaC79S2NLUhZQ0OlVAn8ELt7caMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS0JvTHYxTFkwdFNGbERRNlZVQ2Z3UXUzdHhvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS8zZjUxNTQtNjNkOC00YTRiLTlhNDgt MWM5YzRhMWJiZDQzLzEvS0JvTHYxTFkwdFNGbERRNlZVQ2Z3UXUzdHhvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOS8zZjUxNTQtNjNkOC00YTRiLTlhNDgtMWM5YzRhMWJiZDQz LzEvS0JvTHYxTFkwdFNGbERRNlZVQ2Z3UXUzdHhvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjp5RSOiR 8AI9jM8T3R4ykSu0xxZUEEpkQXXP9voSOjieB8Ft1NSjD0WhEIv6Or0Jx6p2MUII PoU5mmry4ehG33tPEdvBDKXslflFGabl6PfyRqkQq3IYigbJjZ8+jopV0mlPwN9B BWUW/MI69DzGNhpM0QN3LBrEC9xjNDkp0lwJBqVv0HEPtnictgGhsh+Gc/Qy0kvP 5P/+qCpqC9+6SpLpVkuRRkC332GL4rJeaX7HL6LhUSHsJSfayk1Pyfa4wbHNjGNu J79EsdsCdlY6FLov+hA6wS71QDMQXaeBkq2V2aGbp20JdDFpQ9G2arhtW7kCAhGK HQnftZ0v2ozMDA== -----END CERTIFICATE-----Generated at Mon Feb 9 18:42:00 2026 by rpki-client